pass hashref to CGI#header explicitly